$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa File: a37593aa-4999-3250-9d18-4320c2f39adb.roa (raw, json) Hash identifier: iGA/hj1dHz8mAUcKs4OffmaX38InFobQw9qtbLtNUKY= Subject key identifier: CE:F1:10:A9:CD:20:E9:40:11:99:BB:B8:74:EC:8C:C2:76:B1:2C:0A Certificate issuer: /CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Certificate serial: 010D0C9F4328584BA50237C696159F5376BB3900 Authority key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:37:c6:96:15:9f:53:76:bb:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=062559e5-6687-4179-a971-ba68f37ec8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:ca:93:bc:df:e9:53:50:6f:83:99:97:86: 57:a6:1d:9a:ce:5e:b8:41:f0:7d:3f:77:f9:7b:ae: 2e:85:57:31:4e:25:b8:28:bb:04:cd:6f:51:55:94: 35:80:2d:c7:39:20:be:6a:bc:fb:99:1f:36:f4:26: 1e:01:0c:4a:57:32:63:25:2c:ae:99:b9:5c:2f:3d: 35:c6:bf:66:bd:b3:71:9a:2f:13:31:9e:df:9c:69: b2:78:b8:ff:68:a6:ed:b4:61:cc:57:fe:a9:fe:c3: 8f:bc:54:4e:44:a5:8c:46:9e:5a:4a:bf:2c:03:ad: de:82:27:ca:4b:ef:98:3c:3f:ad:bf:3d:30:2d:e8: 25:9d:2b:cf:52:5b:fa:e3:09:04:ab:24:fd:64:0e: 0e:33:11:28:9c:d3:01:e0:23:50:3a:c1:6e:ed:6c: d9:59:ec:8c:de:d5:41:5e:ed:42:43:79:18:23:f1: a4:a1:27:3a:cc:71:eb:b9:27:69:d9:e6:d3:f9:e2: 48:fc:61:53:c6:52:12:b9:cf:50:eb:e7:24:25:d4: 04:03:e3:7d:36:29:a2:d4:71:48:c0:b5:59:9c:03: 0d:a6:1b:59:79:49:d6:1b:0c:54:35:fb:63:da:b6: c8:0f:18:2a:14:a7:b8:f6:86:a5:ab:01:24:9b:5c: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:10:A9:CD:20:E9:40:11:99:BB:B8:74:EC:8C:C2:76:B1:2C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl X509v3 Authority Key Identifier: keyid:B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer sbgp-ipAddrBlock: critical IPv4: 23.133.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:14:45:2d:78:0a:08:bd:e7:46:f0:79:bd:e9:34:3d:0a:cb: 7e:94:bc:34:d2:32:2d:88:41:23:8e:bc:48:26:7d:66:f1:fa: b7:f1:89:10:e7:6a:58:52:ea:2b:4b:3e:89:c4:c4:c4:96:61: 78:03:74:b3:0a:08:4f:d1:bd:ee:0e:72:27:fb:74:20:7f:53: a3:2e:bb:2f:01:4d:73:8d:ef:41:fd:94:31:37:2a:f8:72:1e: a6:1b:61:cb:6d:d6:8c:77:95:3e:cb:e2:6a:f2:5f:4d:11:ba: c2:a4:31:4e:5b:6d:a1:ff:b2:a6:ba:4a:0f:4b:34:49:10:cf: 7e:49:99:e7:7a:00:d0:a3:26:38:14:f7:cb:56:83:bd:06:8d: 72:f7:dc:a9:1a:45:ab:c4:7b:68:f4:cf:ef:94:d5:5c:c0:94: 8e:4f:b8:dd:6c:12:cb:44:4d:c5:d0:2e:03:8d:33:37:d6:49: 34:8b:68:e5:ca:54:c7:12:4f:83:7d:34:1e:e3:c7:22:bc:30: 02:67:ab:4e:99:6a:ed:e8:ef:b7:13:e6:5a:02:8c:24:ae:1a: cc:72:83:b6:07:57:9e:41:88:21:84:d3:2a:70:ce:a8:5f:20: e6:e9:cc:f5:21:fa:7f:e0:e8:f0:9c:98:23:db:27:b8:0b:b1: f2:89:a6:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjfGlhWfU3a7OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNmU1NDUtMTk0NC00Y2EwLWExNTUtNjlkZWQyY2Ri MWZmMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk MDYyNTU5ZTUtNjY4Ny00MTc5LWE5NzEtYmE2OGYzN2VjOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ljKk7zf6VNQb4OZl4ZXph2azl64QfB9P3f5 e64uhVcxTiW4KLsEzW9RVZQ1gC3HOSC+arz7mR829CYeAQxKVzJjJSyumblcLz01 xr9mvbNxmi8TMZ7fnGmyeLj/aKbttGHMV/6p/sOPvFRORKWMRp5aSr8sA63egifK S++YPD+tvz0wLeglnSvPUlv64wkEqyT9ZA4OMxEonNMB4CNQOsFu7WzZWeyM3tVB Xu1CQ3kYI/GkoSc6zHHruSdp2ebT+eJI/GFTxlISuc9Q6+ckJdQEA+N9Nimi1HFI wLVZnAMNphtZeUnWGwxUNftj2rbIDxgqFKe49oalqwEkm1yjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7xEKnNIOlAEZm7uHTsjMJ2sSwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81OWY2 ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJjZGIxZmYvYTM3NTkzYWEtNDk5OS0z MjUwLTlkMTgtNDMyMGMyZjM5YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTlmNmU1NDUtMTk0NC00Y2EwLWEx NTUtNjlkZWQyY2RiMWZmLzU5ZjZlNTQ1LTE5NDQtNGNhMC1hMTU1LTY5ZGVkMmNk YjFmZi5jcmwwHwYDVR0jBBgwFoAUtr+vPh3qzjyMeeE8dUIb/8NkN5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRl ZDJjZGIxZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUURS14Cgi950bweb3pND0Ky36UvDTSMi2IQSOOvEgmfWbx+rfxiRDn alhS6itLPonExMSWYXgDdLMKCE/Rve4Ocif7dCB/U6Muuy8BTXON70H9lDE3Kvhy HqYbYctt1ox3lT7L4mryX00RusKkMU5bbaH/sqa6Sg9LNEkQz35Jmed6ANCjJjgU 98tWg70GjXL33KkaRavEe2j0z++U1VzAlI5PuN1sEstETcXQLgONMzfWSTSLaOXK VMcST4N9NB7jxyK8MAJnq06Zau3o77cT5loCjCSuGsxyg7YHV55BiCGE0ypwzqhf IObpzPUh+n/g6PCcmCPbJ7gLsfKJpog= -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:24 2025 by rpki-client